General
- Target Brain.exe
- Size 7.6MB
- Sample260817-vn9yaawsa1
- SHA256 e262ae86db6b22ad9d5a242457798148db14ff29814d5df6d513c2c8c1434f80
- MD5 dbfbe828718b61a3be780fb6a3611199
- SHA1 7e50125af0aac53e4969438edea5f4dae8a239d6
- SHA512 b374da68720e9a3f355f4ed52698ac68cee1aff299e66ce0acf4335278e98c67bf56f15e44b6d00c43cd501531a6aec76c58bb7cb986a0ee955de24f73f1d0bb
- SSDEEP 98304:Nuu1ywRDIBdVKi1qZ2IlblAw/hSYrypSP2Ff0UV/yVx48+SwMlkF:Nu6pRMB3FEZwhJSA0UVySSwMl8
- TLSH T17586E062A69D8B4DF026B039C99B9317D7F1BC0D2331CF8BAAD09C778E4F590B559209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Brain.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Brain.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Brain.exe
- Size 7.6MB
- SHA256 e262ae86db6b22ad9d5a242457798148db14ff29814d5df6d513c2c8c1434f80
- MD5 dbfbe828718b61a3be780fb6a3611199
- SHA1 7e50125af0aac53e4969438edea5f4dae8a239d6
- SHA512 b374da68720e9a3f355f4ed52698ac68cee1aff299e66ce0acf4335278e98c67bf56f15e44b6d00c43cd501531a6aec76c58bb7cb986a0ee955de24f73f1d0bb
- SSDEEP 98304:Nuu1ywRDIBdVKi1qZ2IlblAw/hSYrypSP2Ff0UV/yVx48+SwMlkF:Nu6pRMB3FEZwhJSA0UVySSwMl8
- TLSH T17586E062A69D8B4DF026B039C99B9317D7F1BC0D2331CF8BAAD09C778E4F590B559209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Suspicious use of NtSetInformationThreadHideFromDebugger